Fedora 32 : PyYAML (2021-eed7193502)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-eed7193502 advisory. - A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it process...

tensorflow-py:immutableConst_fuzz: Segv on unknown address in tensorflow::TensorHandle::TensorHandle

Detailed Report: https://oss-fuzz.com/testcase?key=5351196414050304 Project: tensorflow-py Fuzzing Engine: libFuzzer Fuzz Target: immutableConstfuzz Job Type: libfuzzerasantensorflow-py Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

Remote Code Execution (RCE)

rsshub is vulnerable to remote code execution. An attacker is able to inject malicious code via the eval or Function constructor which allows an attacker to inject and execute codes in the system...

CVE-2021-21278

RSSHub is an open source, easy to use, and extensible RSS feed generator. In RSSHub before version 7f1c430 non-semantic versioning there is a risk of code injection. Some routes use eval or Function constructor, which may be injected by the target site with unsafe code, causing server-side securi...

CVE-2021-21278: Improper Neutralization of Special Elements in Output Used by a Downstream Component

RSSHub is an open source, easy to use, and extensible RSS feed generator. In RSSHub before version 7f1c430 non-semantic versioning there is a risk of code injection. Some routes use eval or Function constructor, which may be injected by the target site with unsafe code, causing server-side securi...

PT-2021-14384

Name of the Vulnerable Software and Affected Versions: RSSHub versions prior to 7f1c430 Description: RSSHub is an open source, easy to use, and extensible RSS feed generator. The issue arises from some routes using eval or Function constructor, which may be injected by the target site with unsafe...

RSSHub Injection Vulnerability

An injection vulnerability exists in RSSHub that stems from the use of "eval" or "Function constructor" in some routes, leading to server-side security issues...

CVE-2021-21248

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability involving the build endpoint parameters. InputSpec is used to define parameters of a Build spec. It does so by using dynamically generated Groovy classes. A user able to control job paramete...

CVE-2019-15080

An issue was discovered in a smart contract implementation for MORPH Token through 2019-06-05, an Ethereum token. A typo in the constructor of the Owned contract which is inherited by MORPH Token allows attackers to acquire contract ownership. A new owner can subsequently obtain MORPH Tokens for...

CVE-2019-15078

An issue was discovered in a smart contract implementation for AIRDROPX BORN through 2019-05-29, an Ethereum token. The name of the constructor has a typo wrong case: XBornID versus XBORNID that allows an attacker to change the owner of the contract and obtain cryptocurrency for free...

CVE-2019-15079

A typo exists in the constructor of a smart contract implementation for EAI through 2019-06-05, an Ethereum token. This vulnerability could be used by an attacker to acquire EAI tokens for free...

Design/Logic Flaw

An issue was discovered in a smart contract implementation for AIRDROPX BORN through 2019-05-29, an Ethereum token. The name of the constructor has a typo wrong case: XBornID versus XBORNID that allows an attacker to change the owner of the contract and obtain cryptocurrency for free...

Prototype Pollution

dset is vulnerable to prototype pollution. An attacker is able to exploit the vulnerability to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...

CVE-2019-15078: Undefined Security Weakness

An issue was discovered in a smart contract implementation for AIRDROPX BORN through 2019-05-29, an Ethereum token. The name of the constructor has a typo wrong case: XBornID versus XBORNID that allows an attacker to change the owner of the contract and obtain cryptocurrency for free...

PT-2020-9655

Name of the Vulnerable Software and Affected Versions MORPH Token versions through 2019-06-05 Description An issue was discovered in the smart contract implementation of MORPH Token, allowing attackers to acquire contract ownership due to a typo in the constructor of the Owned contract. This...

Etherscan ERC20 Token Security Vulnerability

Etherscan ERC20 Token is a validation service organized by Etherscan for use in EtherCurrency services. A security vulnerability exists in the Etherscan ERC20 Token version 2019-06-05 and prior versions, which stems from a typo in the constructor that implements the smart contract. An attacker...

AIRDROPX BORN Security Vulnerability

AIRDROPX BORN is an API token service from AIRDROPX BORN that can be used to convert and exchange Bitcoin with other network coins. A security vulnerability exists in AIRDROPX BORN version 2019-05-29 and earlier versions, which stems from a misspelling of the name of the constructor function in t...

MORPH Token Security Vulnerability

MORPH Token is an API token service from MORPH Token that can be used to convert and exchange Bitcoin with other network coins. A security vulnerability exists in MORPH Token version 2019-06-05 and prior versions that stems from a spelling error in the constructor of an owned contract inherited b...

skia:skruntimeeffect: Use-after-poison in SkTArray<std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::E

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5744111596470272 Project: skia Fuzzing Engine: honggfuzz Fuzz Target: skruntimeeffect Job Type: honggfuzzasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x631000000bb8...

Type confusion

This affects the package multi-ini before 2.1.2. It is possible to pollute an object's prototype by specifying the constructor.proto object as part of an array. This is a bypass of CVE-2020-28448...